fscrypt.git/security, branch ext4

Random changes

2017-10-19T09:22:29+00:00

Move around and fscrypt refactor

2017-10-19T09:22:26+00:00

security: Sync filesystem before dropping caches

2017-10-02T23:49:16+00:00

Fix lint

2017-09-29T10:08:03+00:00

security: Add check option to UserKeyringID

2017-09-29T09:52:56+00:00

security: Change user keyring lookup algorithm

2017-09-01T07:53:07+00:00

Now instead of spawning a seperate thread we alternate between changing
the euid and ruid to both find the keyring and link it to the process
keyring. Note that we also ensure that the user keyring is linked into
the root keyring whenever possible.

security: No more permenant privilege dropping

2017-09-01T07:50:42+00:00

This was creating an issue becasuse fully dropping privileges required
spawning a goroutine and using rutime.DropOSThread().

security: Error if privilege reset goes wrong

2017-08-31T19:09:26+00:00

Fixed linter issues

2017-08-31T18:29:30+00:00

security: Rewrite of keryings and permissions

2017-08-31T00:51:05+00:00

The keyring lookup functions no longer read from /proc/keys. Now they
simply spawn a thread, drop privs, and check with GetKeyringID and
KEY_SPEC_USER_KEYRING. See userKeyringID() for more info.

The privileges functions have also been changed. Now the concept of
setting privileges is seperate form the concept of setting up the
keyrings.